Heap-based Buffer Overflow in Microsoft Windows Search Component
CVE-2026-50679
What is CVE-2026-50679?
A heap-based buffer overflow vulnerability in the Microsoft Windows Search Component allows an authorized attacker to escalate privileges locally. By exploiting this flaw, attackers can gain increased access to system resources, potentially compromising system integrity. Users are advised to apply security patches released by Microsoft to safeguard their systems against this vulnerability. More details can be found in the official advisory.
Affected Version(s)
Windows 11 Version 24H2 ARM64-based Systems 10.0.26100.0 < 10.0.26100.8875
Windows 11 Version 25H2 ARM64-based Systems 10.0.26200.0 < 10.0.26200.8875
Windows 11 version 26H1 ARM64-based Systems 10.0.28000.0 < 10.0.28000.2525
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.